Litigation Holds for Financial Disputes

When to Start a Litigation Hold

Start preservation planning when the facts point to a financial claim and relevant records face deletion or alteration. Record the anticipated claim, the issues already known and the events that prompted action. A disputed transfer, threatened recovery claim or complaint about an executor can identify the need before proceedings begin.

In Australia, the applicable duties depend on the forum, professional obligations and any orders. The US expression “litigation hold” does not create one uniform Australian statutory procedure. The Judicial Commission of NSW’s discussion of evidence preservation explains the danger of destroying relevant electronic material and lawyers’ duties to the court.

Separate preservation from the later decision about disclosure. In Federal Court proceedings, rule 20.12 requires a court order for discovery. Waiting for that order can leave a retention cycle running while the team identifies documents. Preserving material does not decide its relevance, privilege or eventual production.

A subpoena requires attendance or production to the court. A search order can authorise steps to preserve evidence under court supervision. An internal preservation instruction gives neither compulsory third-party access nor permission to search another person’s device.

Identify Custodians and Financial Sources

Map each disputed issue to the people and sources likely to hold evidence. A custodian is a person who holds or manages relevant records. Include former staff where their material remains under the client’s control, and identify the administrator responsible for each system.

For a fictional dispute over payments to a director’s business, a source register could contain the following entries.

Financial-Dispute Source Register

Issue	Custodian or holder	Source	Preservation action
Payment authorisation	Finance manager	Email and approval attachments	Preserve the mailbox and original attachments
Payment execution	Treasury team	Bank PDFs, transaction exports and payment confirmations	Retain originals with account and retrieval details
Accounting treatment	Financial controller	Accounting system and journals	Arrange an authorised export with its audit history
Instructions outside email	Director and assistant	Business messaging and local device files	Identify locations and arrange authorised preservation
Supporting agreement	Legal and records teams	Cloud folders and signed paper contract	Protect cloud versions and retain physical originals
Recipient account evidence	External bank or counterparty	Records outside the client’s control	Record the gap and pursue a lawful request or court process

Define the relevant period by the alleged conduct and surrounding events. Include earlier instructions or later reversals where they explain a disputed payment. Record what the client possesses or controls separately from material held by a bank, accountant or other third party.

Keep original PDFs and their source information. Record the account, statement period, original filename, retrieval method and person who obtained the file. Preserve the source email or portal receipt where available. The Federal Court’s electronic discovery checklist calls for a strategy to preserve potentially discoverable electronic documents in their original format.

Write and Deliver the Preservation Notice

Give each recipient a notice that explains what to preserve and how to acknowledge the instruction. Use language that the recipient can apply to their own records. A general request to “keep everything relevant” leaves the finance team guessing which accounts and systems the lawyer means.

The following fictional notice outline concerns alleged unauthorised supplier payments. Adapt its scope and delivery to the matter and the recipient’s authority.

1. Identify the matter as the review of alleged unauthorised payments to the director’s business. Name the responsible lawyer and the notice’s issue date.
2. Identify the affected custodians and record categories. Specify payment approvals, bank statements, accounting entries, contracts and communications about the payments.
3. Define the relevant period and any continuing records to retain. Describe the accounts and transaction references sufficiently for recipients to identify them.
4. Instruct recipients to preserve originals and existing versions. Explain the handling of email, cloud files, local copies and paper records without asking them to investigate devices themselves.
5. Require recipients to report scheduled deletion, account closure, missing records or inaccessible sources to the named lawyer immediately.
6. State the acknowledgement deadline and contact route. Ask recipients to confirm their understanding and identify other people or systems holding the material.
7. Explain that the instruction continues until the responsible lawyer varies or releases it in writing.

Record delivery and acknowledgement for every recipient. Follow up failures and refusals individually. An acknowledgement that the notice was read is different from confirmation that a system’s deletion control has changed.

A preservation request sent to a bank is a separate communication. The private notice itself does not compel the bank to retain or produce records, grant account access or override confidentiality. Record the response and assess the available lawful route where cooperation is insufficient.

Suspend Destruction and Check Compliance

Coordinate with records and IT teams to suspend relevant deletion, overwriting and physical disposal. Identify the actual rule or process for each source before changing it. A user’s promise to keep an email does not address a system that automatically purges it.

Use a change log that records the source, existing retention setting, authorised change, person applying it and confirmation time. Retain the administrator’s output or record of the setting alongside the legal instruction. Preserve audit information and document any system limitation that affects the hold.

Check scheduled mailbox removal, shared-folder clean-ups, accounting-system migrations and paper shredding. Assess backup rotation where it could remove a relevant source unavailable elsewhere. Records and IT specialists can identify the preservation method without turning the lawyer’s instruction into an improvised technical acquisition.

Set follow-up intervals around the risks. A departing finance manager or imminent system migration needs attention before the ordinary review meeting. When a new account or custodian emerges, update the register and send the additional instruction. Obtain confirmation that the new source is covered.

If a recipient has acknowledged the notice but a retention job still runs, keep that source marked unresolved. Escalate it to the authorised administrator and responsible lawyer. Close the action only after the team records the applied control and its effective status.

Choose a Hold Process and Supporting Solution

Choose the hold process by the number of custodians, system coverage and frequency of change. A controlled notice-and-register process can suit a matter with few sources and clear ownership. Dedicated legal hold software becomes more useful when many acknowledgements, overlapping matters or changing custodians make manual follow-up difficult.

Hold Process and Software Support Compared

Criterion	Controlled notice and register	Software-supported process
Record scope	A named owner records every digital and physical source	Configured sources still need comparison with the matter’s source register
Custodian identification	Staff compare the client’s personnel records with the source register	Assess how the software identifies custodians and records the lawyer’s selection
Acknowledgements	Staff log delivery and chase each recipient	Notice and acknowledgement tracking can reduce repeated follow-up
Reminders	A named owner schedules reminders and follows up overdue responses	Assess reminder rules and exception reports against the required follow-up intervals
Technical preservation	Administrators apply and confirm controls separately	Available retention controls depend on the connected systems and configuration
Audit history	Preserve notice versions, responses and change records	Assess whether the system retains and exports the history the team needs
Changing scope	The lawyer updates recipients and instructions	Check how new custodians, new sources and overlapping holds are handled
Release	Written authority identifies each source being released	Confirm who can release a control and how the system records that decision

A litigation hold solution must cover the client’s actual records. A notice platform can track staff responses while leaving paper archives and local device files outside its technical controls. Compare the register with the proposed coverage before relying on the solution.

The supervisor must inspect a matter-level hold record showing each custodian, notice version, delivery evidence and acknowledgement. It must also show reminders, unresolved actions and scope changes, with the written release decision retained when the hold ends. A manual register needs linked records for the same checks. For software, require an export that keeps this history available after the matter closes.

Buying software does not determine the legal preservation duty. The lawyer remains responsible for the matter’s legal scope and release decision. Assign operational owners for notices and controls so that each action has someone who must confirm completion.

Microsoft 365, Office 365 and Exchange Holds

Microsoft mailbox Litigation Hold preserves mailbox content, including deleted items and original versions of modified items. It also covers an enabled archive mailbox. Microsoft 365 Litigation Hold, often described using the older Office 365 wording, is one system control within the broader preservation instruction.

For Exchange Online, Microsoft specifies Exchange Online Plan 2 or Plan 1 with a separate Exchange Online Archiving licence. A finite hold duration runs from an item’s receipt or creation, so an older message can reach its limit during the dispute. Microsoft’s mailbox hold instructions explain the duration and deletion behaviour.

An authorised administrator needs the relevant Exchange permissions. Microsoft’s Exchange Online permissions guidance identifies Discovery Management and its Legal Hold role. Permission to change a hold and permission to search or export evidence are separate matters to resolve.

Administrator Instruction Checklist

The following fictional instruction covers the finance manager’s mailbox in the supplier-payment dispute.

1. Identify the mailbox precisely and confirm its licence and administrator permissions. Record the relevant dispute period and the lawyer’s retention instruction.
2. In the Microsoft 365 admin centre, select Users, Active users and the user. Under Mail and More actions, open Manage litigation hold.
3. Turn on litigation hold, apply the authorised duration and save. Microsoft allows up to 240 minutes for the change to take effect.
4. Obtain a confirmation record for that mailbox. Microsoft documents Get-Mailbox with LitigationHoldEnabled for checking the enabled state. Require the administrator to record the duration too.
5. Arrange a documented retrieval check by a person authorised to search preserved content. Record the source scope checked and any exception before treating the mailbox action as complete.

If the hold option is missing, the administrator must resolve the mailbox’s licensing and assigned permissions. Keep the source open in the register until confirmation arrives. An enabled mailbox setting does not confirm coverage of local files, bank portal originals or paper records.

Microsoft Purview eDiscovery uses case-related hold policies for selected content locations, including mailboxes and sites. Its documented hold procedure requires eligible licensing and eDiscovery permissions. The administrator selects the case, creates a hold policy and adds the intended data sources. These holds can take up to 24 hours to apply.

Purview retention policies and labels address retention requirements through separate controls. Record which mechanism applies to each source instead of treating all Microsoft retention settings as interchangeable. Exchange Server also has its own administration guidance, so identify whether a mailbox is hosted in Exchange Online or on premises before issuing technical instructions.

Microsoft’s mailbox hold identification guidance explains how different holds can coexist. Before varying or releasing a control, require the administrator to identify other applicable holds and document the approved change. The legal team must retain a record of the instruction even when the system keeps its own administrative history.

Collect Without Breaking the Evidence Chain

Collect working material through an authorised process while preserving the originals and the record of how the team obtained it. Preservation stops relevant loss. Collection gathers identified material for use. Specialist forensic acquisition addresses technical evidence that requires specialist handling.

Retain a custody record showing who obtained each source, how it was transferred and where the original is stored. Link a working copy to that source. Log conversions, redactions and other processing as separate versions instead of overwriting the preserved material.

For devices or account acquisition, instruct a digital forensics specialist with the authority and scope recorded. Keep technical imaging and deleted-data recovery within that specialist’s work. The later financial discovery workflow addresses relevance, production and review of the preserved records.

For supplied bank statements, FinTrace saves lawyers and forensic accountants hours of conversion and statement review. The service processes large PDF bundles into a searchable Excel ledger and a findings report. Every finding cites the source PDF filename and page, so the financial analysis stays connected to the preserved statements.

FinTrace’s advanced AI workflows use source-grounding checks and independent reviews to produce accurate analysis and flag suspicious transactions. Forensic accountants can use the ledger for their own analysis while retaining more time for interpretation. The service performs this statement-analysis work at a fraction of the cost of manual review or engaging a forensic accountant for the same task.

Keep the preserved statement bundle and its custody register with the matter. Store the delivered ledger and report as derived analysis, with a record of the supplied source files.

Review, Vary and Release the Hold

The responsible lawyer must authorise a scope change or release in writing after checking what still requires preservation. Settlement of one claim does not establish that every source can return to ordinary disposal. Check related proceedings, appeals, regulatory obligations and other active holds affecting the same records.

Identify the exact custodians, accounts and record categories affected by the decision. Record the reason, authorising person and instruction date. If only part of the hold ends, state what remains covered and send clear updated instructions to the affected recipients.

Ask each operational owner to confirm the approved change and record its effective status. A release of the legal instruction does not itself remove a technical hold. Removing one technical hold does not establish that other holds have ended.

Before closing the hold register, confirm that every source has a documented continuing restriction or an authorised release. Retain the notice history and confirmation records. Return released material to the applicable records policy only after the team has resolved every remaining preservation requirement.